Affected by GO-2024-3072 and 2 other vulnerabilities

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2025-3635: In Cilium, packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

multipool

package

v1.14.0-snapshot.3 Latest Latest Go to latest Published: Jun 1, 2023 License: Apache-2.0 Imports: 24 Imported by: 0

Details

This section is empty.

View Source

var ErrAllocatorNotReady = errAllocatorNotReady{}

This section is empty.

type Allocator struct {
	// contains filtered or unexported fields
}

Allocator implements allocator.AllocatorProvider

func (a *Allocator) Init(ctx context.Context) (err error)

func (a *Allocator) Start(ctx context.Context, getterUpdater ipam.CiliumNodeGetterUpdater) (allocator.NodeEventHandler, error)

type NodeHandler struct {
	// contains filtered or unexported fields
}

func NewNodeHandler(manager *PoolAllocator, nodeUpdater ipam.CiliumNodeGetterUpdater) *NodeHandler

func (n *NodeHandler) Create(resource *v2.CiliumNode) bool

func (n *NodeHandler) Delete(resource *v2.CiliumNode)

func (n *NodeHandler) Resync(ctx context.Context, time time.Time)

func (n *NodeHandler) Update(resource *v2.CiliumNode) bool

type PoolAllocator struct {
	// contains filtered or unexported fields
}

func NewPoolAllocator() *PoolAllocator

func (p *PoolAllocator) AddPool(poolName string, ipv4CIDRs []string, ipv4MaskSize int, ipv6CIDRs []string, ipv6MaskSize int) error

func (p *PoolAllocator) AllocateToNode(cn *v2.CiliumNode) error

func (p *PoolAllocator) AllocatedPools(targetNode string) (pools []types.IPAMPoolAllocation)

func (p *PoolAllocator) ReleaseNode(nodeName string) error

func (p *PoolAllocator) RestoreFinished()